🇷🇸
tiredOfAttacks
2026-08-12 03:47:31
(3 weeks ago)
Distributed WordPress credential-stuffing from a rotating proxy pool. 5 requests logged from this ad ...
show more
Distributed WordPress credential-stuffing from a rotating proxy pool. 5 requests logged from this address, including 3 POST /wp-login.php (all failed, HTTP 200). One of 50 sequential addresses in 193.56.116.0/24 taking turns at ~3 login attempts per IP per hour - a rate tuned to stay under per-IP rate-limit thresholds. Forged desktop-browser User-Agent strings rotated per request and a spoofed same-site Referer. Contiguous addressing indicates a commercial proxy pool, not compromised end-user hosts.
show less
Brute-Force
Web App Attack
Anonymous
2026-08-11 19:38:48
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇮🇩
MirrorMaster
2026-08-11 17:03:41
(3 weeks ago)
Port Scan
SSH
IoT Targeted
🇫🇮
YF
2026-08-07 11:00:28
(1 month ago)
WordPress author enumeration
Web App Attack
Anonymous
2026-08-04 22:13:45
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-08-02 20:59:52
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
Baking333
2026-08-02 08:24:56
(1 month ago)
[redacted] 193.56.116.134 - - [02/Aug/2026:09:24:53 +0100] "GET /[redacted] HTTP/1.1" 302 6748 0/747 ...
show more
[redacted] 193.56.116.134 - - [02/Aug/2026:09:24:53 +0100] "GET /[redacted] HTTP/1.1" 302 6748 0/74743 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" [redacted] 193.56.116.134 - - [02/Aug/2026:09:24:54 +0100] "GET /wp-admin/ HTTP/1.1" 301 5816 0/515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0"
show less
Bad Web Bot
Web App Attack
🇺🇸
lostswordfish.com
2026-07-30 09:14:03
(1 month ago)
Wordfence waf block on parsol
Web App Attack
🇮🇹
CoreTech srl
2026-07-19 10:03:58
(1 month ago)
cloudlinux2 fail2ban: 2026-07-19 11:58:57,112 fail2ban.actions [1918]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-07-19 11:58:57,112 fail2ban.actions [1918]: NOTICE [plesk-modsecurity] Unban 103.178.30.141cloudlinux2 fail2ban: 2026-07-19 11:59:23,620 fail2ban.filter [1918]: INFO [plesk-wordpress] Found 45.131.193.216 - 2026-07-19 11:59:22cloudlinux2 fail2ban: 2026-07-19 12:00:51,266 fail2ban.actions [1918]: NOTICE [plesk-modsecurity] Unban 34.97.3.163cloudlinux2 fail2ban: 2026-07-19 12:01:15,854 fail2ban.filter [1918]: INFO [plesk-wordpress] Found 136.144.42.122 - 2026-07-19 12:01:15cloudlinux2 fail2ban: 2026-07-19 12:01:14,266 fail2ban.filter [1918]: INFO [plesk-modsecurity] Found 103.105.97.244 - 2026-07-19 12:01:13cloudlinux2 fail2ban: 2026-07-19 12:01:15,828 fail2ban.filter [1918]: INFO [plesk-wordpress] Found 172.98.32.190 - 2026-07-19 12:01:15cloudlinux2 fail2ban: 2026-07-19 12:01:33,497 fail2ban.filter [1918]: INFO [plesk-wordpress] Found 193.56.116.232 - 2026-07-19 12:01:33cloudlinux2 fail2ban: 2026-07-19 12:01:52,87
show less
Web App Attack
🇳🇱
Site.eu
2026-07-01 12:51:18
(2 months ago)
Repeated wp-login/xmlrpc attempts
Brute-Force
SSH
🇫🇮
bittiguru.fi
2026-07-01 11:51:15
(2 months ago)
193.56.116.134 - [01/Jul/2026:14:50:11 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderh ...
show more
193.56.116.134 - [01/Jul/2026:14:50:11 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "1.11"
193.56.116.134 - [01/Jul/2026:14:50:22 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "1.11"
193.56.116.134 - [01/Jul/2026:14:50:33 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" "1.11"
193.56.116.134 - [01/Jul/2026:14:50:48 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" "1.11"
193.56.116.134 - [01/Jul/2026:14:51:14 +0300] "POST /wp-login
...
show less
Hacking
Brute-Force
Web App Attack
🇫🇮
bittiguru.fi
2026-07-01 11:32:45
(2 months ago)
193.56.116.134 - [01/Jul/2026:14:30:45 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderh ...
show more
193.56.116.134 - [01/Jul/2026:14:30:45 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "1.11"
193.56.116.134 - [01/Jul/2026:14:30:56 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "1.11"
193.56.116.134 - [01/Jul/2026:14:31:28 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "1.11"
193.56.116.134 - [01/Jul/2026:14:32:04 +0300] "POST /wp-login.php HTTP/1.1" 404 149 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.3
...
show less
Hacking
Brute-Force
Web App Attack
🇫🇮
bittiguru.fi
2026-07-01 11:10:11
(2 months ago)
193.56.116.134 - [01/Jul/2026:14:08:54 +0300] "POST /wp-login.php HTTP/1.1" 403 3416 "https://binder ...
show more
193.56.116.134 - [01/Jul/2026:14:08:54 +0300] "POST /wp-login.php HTTP/1.1" 403 3416 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "3.32"
193.56.116.134 - [01/Jul/2026:14:09:15 +0300] "POST /wp-login.php HTTP/1.1" 403 3417 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:119.0) Gecko/20100101 Firefox/119.0" "3.32"
193.56.116.134 - [01/Jul/2026:14:09:33 +0300] "POST /wp-login.php HTTP/1.1" 403 3364 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "3.34"
193.56.116.134 - [01/Jul/2026:14:09:47 +0300] "POST /wp-login.php HTTP/1.1" 403 3418 "https://binderholznordic.fi/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" "3.31"
193.56.116.134 - [01/Jul/2026:14:10:10 +0300] "POST /wp-login.php HTTP/1.1" 403 3479 "https:
...
show less
Hacking
Brute-Force
Web App Attack
🇦🇺
2000cn.com.au
2026-07-01 07:04:55
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bf-wordpress_bf
Web App Attack
Brute-Force
🇺🇸
WeekendWeb
2026-06-30 23:08:57
(2 months ago)
Wordpress Vunerability attack
Web App Attack